NIS2 operational monitoring for verification infrastructure

Security teams now expect machine-readable health, webhook signals on proof events, and reproducible integration paths. This note maps AffixIO surfaces to those procurement questions.

NIS2 operational monitoring covers incident detection, reporting timelines, and evidence that critical digital services remain available. AffixIO publishes component health at status.affix-io.com and signed audit events through webhooks and Merkle leaves.

Procurement teams evaluating verification APIs under NIS2 ask for public status endpoints, webhook audit streams, and SDK packages for CI. AffixIO ships all three without exposing verifier-side PII.

What buyers ask in July 2026

Can we poll a status JSON feed from our NOC without scraping HTML?
Do you emit events when proofs are created, verified, spent, or revoked?
Which SDKs and CI gates exist for our language stack?
How does operational monitoring relate to Merkle audit under EU AI Act Article 12?

See the NIS2 verification buyer guide and regulatory deadlines calendar.

Status API and dashboard

Canonical dashboard: status.affix-io.com. CORS-enabled JSON at GET /api/status/ returns component probes (API, scanner, sandbox, hub, web property). Use it in Grafana, PagerDuty, or internal procurement evidence packs.

Legacy summary page at www.affix-io.com/status points to the subdomain and polls /status/health for API-only checks.

Webhooks and hub console

Configure webhook endpoints in the customer hub. Events include proof.created, proof.verified, proof.spent, merkle.leaf_appended, and key.revoked. Pair with SIEM only after you understand proof-not-log vs SIEM.

Integration packages

Language SDKs, Postman, Terraform scaffold, GitHub Action, and MCP targets are listed on /integrations/. Node package: @affix-io/sdk. Source: GitHub SDK.

Embeddable verify widgets for partner sites: /widgets/. Issuer and verifier portals: issuer · verifier.

Reproduce before procurement sign-off

Open status.affix-io.com and confirm all components operational.
Run verify flows in the sandbox and inspect Merkle leaves.
Import Postman collection or install Node SDK.
Request hub access for webhook configuration during pilot.

All field notes